gme[.]entry-cryptolist[.]app

The domain gme.entry-cryptolist.app has been identified as an active generic phishing threat as of July 29, 2026. DNS analysis shows the domain currently lacks valid nameserver records (NS_NOT_FOUND), which is commonly observed in malicious or hastily deployed infrastructure. The domain resolves to IP address 188.114.97.3, a hosting location frequently associated with ephemeral or potentially malicious operations. Security blocklist data confirms the domain is flagged by PhishDestroy, a known threat intelligence provider.

VirusTotal records indicate that 11 out of 91 security vendors have classified this domain as malicious, adding weight to the assessment of its phishing risk. At present, the domain is not associated with any specific brand or phishing kit based on the available evidence, and the exact web content or targeted entities have not yet been analyzed. The lack of detailed registrar, SSL, HTTP status, or page title information limits further attribution or technical assessment at this stage.

Defenders should treat gme.entry-cryptolist.app as an elevated risk, promptly block any traffic to or from this domain within their environments, and monitor for related indicators of compromise. Continued vigilance is recommended, as the infrastructure remains active and detection by multiple vendors suggests ongoing or recent malicious activity. Security teams should reference the detection counts and blocklist presence as justification for network-wide mitigation measures until further intelligence becomes available.